Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
File:                     F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json)
Hash identifier:          31ouT273yppYETRVTVoB07XCIonMqo33KaDshgWnMu0=
Subject key identifier:   36:8A:ED:14:A9:6F:EE:35:B5:6E:92:38:57:43:53:E9:11:FC:00:02
Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49
Certificate issuer:       /CN=F03C1838587677BF6505C46715F42F8B8416F949
Certificate serial:       5BD2BCF58160A374C23BC037517AFAECC343B9B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
Manifest number:          0223
Signing time:             Sun 01 Mar 2026 21:31:55 +0000
Manifest this update:     Sun 01 Mar 2026 21:26:55 +0000
Manifest next update:     Thu 05 Mar 2026 05:41:55 +0000
Files and hashes:         1: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: RJK+mCq5bhkGWTeeGhWgnNbwAM5lM5fwmMEtjXHLto8=)
                          2: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=)
                          3: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl
                          rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 05:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d2:bc:f5:81:60:a3:74:c2:3b:c0:37:51:7a:fa:ec:c3:43:b9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949
        Validity
            Not Before: Mar  1 21:26:55 2026 GMT
            Not After : Mar  5 05:41:55 2026 GMT
        Subject: CN=368AED14A96FEE35B56E9238574353E911FC0002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a0:c8:da:31:c1:c2:a7:6e:94:73:94:33:9e:
                    5e:92:28:c1:cb:ea:72:e6:3b:63:fd:20:bc:53:cf:
                    de:e8:de:99:05:50:66:e2:f7:ba:0e:e9:25:4c:3c:
                    7f:a6:76:74:ce:07:91:4f:ac:be:e1:ae:39:20:98:
                    9a:f9:07:89:8e:a5:b9:d2:3f:d2:d5:8c:2d:7a:9b:
                    03:1d:4e:52:ae:ed:1d:70:47:5c:29:a8:65:ea:ed:
                    09:8c:0e:fb:e8:77:de:1d:83:cd:32:1d:a8:5e:9e:
                    c0:e8:83:fc:f3:de:50:08:ca:9c:ce:de:d6:ba:a5:
                    81:17:f8:7f:32:95:63:50:8d:af:c5:6b:a4:b9:1c:
                    b4:21:79:5d:57:4f:85:88:71:5b:af:96:7e:17:25:
                    91:d5:1b:ad:eb:7f:82:95:4f:e2:85:f4:c4:51:a7:
                    d2:10:c8:c9:e9:2e:4b:21:c3:a8:a0:73:86:f6:40:
                    d3:fa:8f:7a:f1:f6:81:ce:36:0c:2e:06:8d:38:20:
                    4c:c6:73:e1:fd:a6:bb:b0:e9:33:b3:01:8f:38:e4:
                    d9:77:0e:47:69:ac:3b:4a:d8:4f:03:1c:b7:c4:0c:
                    5c:82:dd:07:3f:dc:d8:f6:e3:19:64:ca:eb:12:5c:
                    19:4c:47:26:6b:ab:b6:40:2e:26:07:52:49:d3:93:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8A:ED:14:A9:6F:EE:35:B5:6E:92:38:57:43:53:E9:11:FC:00:02
            X509v3 Authority Key Identifier:
                keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:24:54:5d:d5:4c:c6:ce:ec:5b:cc:49:42:0e:93:26:0d:cc:
         24:c9:e8:1d:9b:4a:59:21:ec:ce:47:7a:63:ce:ac:ad:5d:14:
         55:b9:bf:15:f1:9a:86:d7:1c:ab:38:6b:9b:a8:80:79:d4:3b:
         49:d8:63:bc:d4:bb:1f:35:fe:71:53:5c:7a:2a:80:8e:47:01:
         04:de:74:13:b7:8b:20:5c:b4:6a:d7:d2:a7:61:19:21:74:14:
         29:05:46:10:f3:11:de:81:76:79:da:6f:f8:a4:b2:47:be:91:
         ac:40:d3:18:79:16:bb:d1:45:f8:e6:4e:c2:6b:27:1b:79:8b:
         34:62:9f:6f:06:e4:cc:92:7d:5c:a3:36:ef:ab:93:26:1f:93:
         aa:23:c3:2a:1f:2e:82:58:4d:ad:09:84:4b:5d:1e:22:df:a1:
         02:1f:0d:0d:d7:2a:e7:fc:cc:a7:19:05:5e:c1:d6:81:c3:98:
         14:f8:bd:be:a0:a8:d6:03:1b:91:be:d8:66:30:a5:52:15:f2:
         71:28:41:0d:d0:74:57:5d:6d:d4:01:6c:05:6e:41:17:47:76:
         b9:67:f2:a0:f8:b2:c4:10:74:00:ed:a4:23:cf:0a:03:90:94:
         24:8c:2e:42:a8:13:1a:04:00:ae:14:7a:02:fa:84:67:f1:7b:
         d9:2e:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:58 2026 by rpki-client